Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/_eQTxfZZbwefhXlLKHO7CEbeNzo.roa
File: _eQTxfZZbwefhXlLKHO7CEbeNzo.roa (raw, json)
Hash identifier: XwbhtEsqMzoTs493oAMc1WoC+bVurXPqsNp3fAtN59M=
Subject key identifier: FD:E4:13:C5:F6:59:6F:07:9F:85:79:4B:28:73:BB:08:46:DE:37:3A
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 019425FD7C4EC7AE2F10A2B21D85B2051557
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/_eQTxfZZbwefhXlLKHO7CEbeNzo.roa
Signing time: Thu 02 Jan 2025 07:49:16 +0000
ROA not before: Thu 02 Jan 2025 07:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60609
IP address blocks: 45.67.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:7c:4e:c7:ae:2f:10:a2:b2:1d:85:b2:05:15:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Jan 2 07:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fde413c5f6596f079f85794b2873bb0846de373a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:47:7c:b9:32:ea:d6:82:a8:d0:1b:05:2b:
76:7c:7c:3b:16:67:a2:0b:b3:4f:db:6d:99:e8:ac:
d5:6d:67:f4:4f:2c:09:b3:eb:cf:48:df:8b:38:b4:
56:9e:fb:63:87:e5:3e:d7:26:4b:48:16:1a:e8:a1:
b4:36:8f:18:1e:83:27:94:ac:d6:9a:07:c8:44:e3:
cb:eb:17:6a:6c:6b:a5:0d:09:52:bf:44:3d:a6:3d:
5c:68:23:40:88:a5:3c:a1:ac:9a:91:56:32:4b:9f:
98:cf:22:76:eb:fe:03:b3:2c:e1:f4:eb:d1:db:e4:
40:7e:c8:37:f1:4a:d0:25:9d:f1:9f:f6:df:09:da:
ca:b9:31:da:5c:3e:1d:ed:70:c3:f5:7f:64:c1:37:
8d:52:48:cd:c6:de:3c:a4:70:f0:fa:d1:74:57:cb:
9b:c8:6b:77:84:93:51:7f:ad:89:bd:6b:32:07:7c:
61:ad:04:45:46:59:25:29:b0:5e:33:39:59:c1:0b:
57:8d:5b:05:54:92:b8:20:ee:2c:89:a0:05:7d:02:
df:ad:a4:27:fc:e0:2d:f4:0a:da:5b:1c:c6:d6:5c:
e4:47:44:91:5f:58:ba:29:b1:11:ba:cd:a8:b4:92:
15:72:a5:ec:f6:08:7f:97:2f:89:17:80:ee:72:43:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E4:13:C5:F6:59:6F:07:9F:85:79:4B:28:73:BB:08:46:DE:37:3A
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/_eQTxfZZbwefhXlLKHO7CEbeNzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.148.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:51:6c:ac:77:49:8d:0c:5b:e9:ec:dd:9d:f9:06:02:6a:0e:
2c:81:d4:d3:89:b0:6b:a2:99:79:4a:af:16:0b:02:af:34:2d:
b6:45:aa:2a:00:be:0d:43:c6:57:09:75:72:33:13:22:65:9d:
b7:cc:f9:cc:d2:13:b5:c9:4b:b0:0c:d5:63:6b:15:23:95:35:
71:24:9c:b1:16:c6:e7:d2:25:94:77:da:81:62:14:1c:28:cc:
3a:27:26:dd:98:bf:d8:5d:29:8e:74:7d:64:0b:a2:eb:e3:7f:
3c:fb:a0:62:cf:85:c7:fe:5a:5f:34:31:39:df:89:71:c2:71:
c2:14:77:80:fd:d0:7a:75:ef:16:17:64:ba:46:fd:a5:36:1e:
51:56:7c:72:6a:d1:d1:e0:42:de:09:48:53:5c:12:df:a5:d8:
58:37:6a:0a:dc:ec:8c:56:50:1e:ca:63:b4:a3:dc:3d:ee:30:
6b:0a:88:3a:0c:d4:e4:79:bf:fe:f1:1b:a4:09:68:34:98:69:
11:6b:50:a5:45:5d:20:b5:ca:7a:18:c1:d5:68:89:63:9c:95:
32:f4:fa:d4:97:2b:94:96:e3:f1:6d:c1:5f:17:44:53:e6:20:
97:81:34:48:2f:a4:7b:b7:16:96:75:59:45:56:d9:3c:ac:e2:
8c:f9:84:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/XxOx64vEKKyHYWyBRVXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMjk2Y2Y3MDQzODM2ZWJlMTc0OWM1YzE0NTQ3Yzc5ODQx
ZTFiODkwHhcNMjUwMTAyMDc0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGU0MTNjNWY2NTk2ZjA3OWY4NTc5NGIyODczYmIwODQ2ZGUzNzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzpHfLky6taCqNAbBSt2fHw7Fmei
C7NP222Z6KzVbWf0TywJs+vPSN+LOLRWnvtjh+U+1yZLSBYa6KG0No8YHoMnlKzW
mgfIROPL6xdqbGulDQlSv0Q9pj1caCNAiKU8oayakVYyS5+YzyJ26/4Dsyzh9OvR
2+RAfsg38UrQJZ3xn/bfCdrKuTHaXD4d7XDD9X9kwTeNUkjNxt48pHDw+tF0V8ub
yGt3hJNRf62JvWsyB3xhrQRFRlklKbBeMzlZwQtXjVsFVJK4IO4siaAFfQLfraQn
/OAt9AraWxzG1lzkR0SRX1i6KbERus2otJIVcqXs9gh/ly+JF4DuckOCzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP3kE8X2WW8Hn4V5SyhzuwhG3jc6MB8GA1UdIwQY
MBaAFNwpbPcEODbr4XScXBRUfHmEHhuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODY3MjAtNmE4Yy00NTQ5LWI0MDMt
NjhhYmU1MmQzMDM0LzEvX2VRVHhmWlpid2VmaFhsTEtITzdDRWJlTnpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83ODY3MjAtNmE4Yy00NTQ5LWI0MDMtNjhhYmU1MmQzMDM0
LzEvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLUOUMA0G
CSqGSIb3DQEBCwUAA4IBAQAsUWysd0mNDFvp7N2d+QYCag4sgdTTibBropl5Sq8W
CwKvNC22RaoqAL4NQ8ZXCXVyMxMiZZ23zPnM0hO1yUuwDNVjaxUjlTVxJJyxFsbn
0iWUd9qBYhQcKMw6JybdmL/YXSmOdH1kC6Lr4388+6Biz4XH/lpfNDE534lxwnHC
FHeA/dB6de8WF2S6Rv2lNh5RVnxyatHR4ELeCUhTXBLfpdhYN2oK3OyMVlAeymO0
o9w97jBrCog6DNTkeb/+8RukCWg0mGkRa1ClRV0gtcp6GMHVaIljnJUy9PrUlyuU
luPxbcFfF0RT5iCXgTRIL6R7txaWdVlFVtk8rOKM+YTx
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:30:17 2025 by rpki-client